PRIVACY POLICY
Last updated:
Who is responsible
Aaron Smith, based in Spain, is responsible for the personal data described here. Suma is the website and brand name. Contact Aaron using the email below.
Information we collect
The enquiry form collects your name, email, selected language, website goals and whether you have an online presence. It also collects any website or business profile/social URL you choose to supply, details of other goals and optional specific requests. We receive the page address from which you submit, without its query string or fragment.
Providers also process normal technical information needed to deliver requests securely and prevent abuse, such as connection and request information. Please avoid including sensitive information that is unnecessary for your enquiry. Required form fields are needed to review and respond to your request; optional details are your choice.
How we use it
We use your information to review your enquiry, understand the website you need, reply by email, discuss scope and next steps, prepare a proposal where appropriate, prevent spam and abuse, and maintain reasonable enquiry records. Sending an enquiry does not subscribe you to marketing.
Legal basis
When you ask about a possible project, processing is necessary to take steps at your request before a possible contract. Where appropriate, we also rely on legitimate interests in responding to enquiries, maintaining proportionate records and protecting the service from abuse, balanced against your rights. We may retain information to meet applicable legal obligations. The notice beside Send explains the use of your data; it is not a marketing-consent request.
Providers and international processing
Formspree processes and forwards submissions and may store them in its form inbox according to the account plan. Its current free plan provides a 30-day submission archive. Formspree states that its services run on Amazon Web Services infrastructure in the United States and that it relies on Standard Contractual Clauses as a data processor for GDPR-related international processing.
Enquiries are delivered to Aaron’s temporary Gmail inbox. Google processes email data under its applicable terms and privacy documentation. Data is not necessarily stored only in Spain. The links below explain these providers’ practices and safeguards.
How long we keep information
Unsuccessful or inactive enquiries are kept only as long as reasonably necessary to respond and follow up, normally no longer than 12 months after the last meaningful contact. We may keep information longer for an active project, a contractual relationship, a dispute or an applicable legal obligation.
Formspree’s current free-plan archive lasts 30 days. Enquiries in Gmail require periodic manual review and deletion when no longer needed; automatic Gmail deletion is not implemented.
Who receives it
We do not sell personal information. Providers needed to operate the enquiry system currently include Formspree and Google/Gmail. Once the website is deployed on Cloudflare, Cloudflare will also process information needed for hosting and delivery. Information may also be disclosed where legally required. No advertising or analytics provider is included in the current website.
Your rights
Where applicable, you can request access, correction, deletion, restriction, objection or portability by contacting Aaron. These rights depend on the circumstances and applicable legal exceptions; we may need proportionate information to verify your identity. You may also complain to Spain’s supervisory authority, the Agencia Española de Protección de Datos (AEPD).
Security
We use reasonable technical and organisational measures appropriate to the information handled, including limiting access and using encrypted HTTPS transport for submissions to Formspree. The publicly deployed website will also use HTTPS. No system can guarantee perfect security.
Automated decisions
We do not use enquiry data for automated decisions that have legal or similarly significant effects on you.
Changes to this policy
This policy may change as the website or its providers change. The current revision date appears at the top of this page.